CVE-2026-3502

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

March 31, 2026

Last Seen

August 21, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Head Mare Hackers Exploit TrueConf Vulnerabilities to Deploy Backdoors78.7

The Head Mare hacktivist group has breached TrueConf video conferencing servers, exploiting vulnerabilities to replace legitimate client installers with malicious versions containing backdoors. The attackers executed arbitrary code with high privileges using two vulnerabilities tracked as KLCERT-26-...

Operation TrueChaos: Exploitation of TrueConf Zero-Day Vulnerability77.8

In early 2026, a series of targeted attacks named Operation TrueChaos exploited a zero-day vulnerability in TrueConf software, tracked as CVE-2026-3502, which allows attackers to execute arbitrary files on connected endpoints. The flaw, stemming from a missing integrity check in the update mechanism...